# Official Cloudflare sources

Re-check these sources before setup because endpoints, packages, client configuration, and authentication can change.

- `https://developers.cloudflare.com/agent-setup/prompt.md`
- `https://developers.cloudflare.com/agent-setup/llms.txt`
- `https://github.com/cloudflare/skills`
- `https://github.com/cloudflare/mcp`
- `https://github.com/cloudflare/mcp-server-cloudflare`

The official setup prompt observed on 2026-07-15 registers separate MCP endpoints for Cloudflare API access, documentation, bindings, builds, and observability. The documentation endpoint was public; the other endpoints used OAuth on first tool use. Verify this again before configuration.

## Review requirement

The official prompt instructs agents to run commands directly. This skill deliberately adds a review and approval boundary. Before execution, inspect global package installation, unpinned `npx` or marketplace content, user-level config changes, OAuth grants, write-capable tools, update behavior, and rollback behavior.

Do not copy Cloudflare documentation wholesale into a skill. Retrieve current product documentation when a task depends on runtime, API, pricing, limits, or security behavior.